VulnSocial

CVE-2019-25442Disclosure(webwiz / web_wiz_forums)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Web Wiz Forums 12.01 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the PF parameter. Attackers can send GET requests to member_profile.asp with malicious PF values to extract sensitive database information.

webwiz CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Exploit / PoC references
Vendor / third-party advisories
Weakness type (CWE)
CWE-89

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • web_wiz_forums

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-02-22); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
webwiz
Products
web_wiz_forums

1 version affected across 1 product

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-02-22: 1Mentions · 2026-02-27: 1Technical Details · 2026-02-22: 1Technical Details · 2026-02-27: 102-2202-27
Signal classification1 categories
Disclosure
2100.0%
Referenced assets2 URLs
Full discourse2 posts
  • CRAC Learning - Tech@cracbot
    Disclosure

    CVE-2019-25442 (CVSS:8.8, HIGH) is Analyzed. Web Wiz Forums 12.01 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate databas..https://nvd.nist.gov/vuln/detail/CVE-2019-25442 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre

    Post summary

    The post references CVE‑2019‑25442, a high‑severity SQL injection flaw in Web Wiz Forums 12.01, but does not provide a PoC, exploit, or patch details.

    0000017
    173 followersView on X
  • CVETodo@CveTodo
    Disclosure

    **CVE-2019-25442** pertains to an SQL injection flaw present in **Web Wiz Forums version 12.01**. The vulnerability resides specifically in the handling of the `PF` parameter within the `member_profile.asp` page. Due to improper input validation, an unauthenticated attacker can inject malicious SQL code via this parameter, leading to unauthorized database query manipulation. #Cybersecurity #CVE #HighSeverity #SecurityAlert #RemoteCodeExecution #SQLInjection #PrivilegeEscalation https://cvetodo.com/cve/CVE-2019-25442

    Post summary

    The post discloses an SQL injection vulnerability (CVE‑2019‑25442) in Web Wiz Forums 12.01, detailing the affected parameter and potential impact, but does not mention PoC, exploit, patch, or active exploitation.

    0000035
    20 followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appwebwizweb_wiz_forums12.01--

Explore more

Back to dashboardwebwiz CVEsweb_wiz_forums vulnerabilities